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[57] ABSTRACT 

A mastca- decoder for use with a master smart card and at 
least one slave decoder for use with a slave smart card are 
arranged In a pay tv system, wherein the master decoder 
receives slave entitlement messages from a central manage- 
ment device and writes the slave entitlement messages to the 
slave smart cards when the slave smart cards are inserted in 
the master decoder. This ensures that the slave decoders are 
used within dose proximity of the master decoders, such as 
in the same dwelling. 

6 Claims, 1 Drawing Sheet 
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PAY TV METHOD AND DEVICE WHICH 
COMPRISE MASTER AND SLAVE 
DECODERS 

BACKGROUND OF THE INVENTION 

The invention relAtes to a pay-TV method based on the 
use at a user's place ctf a microprocessor card referred to as 
smart card to be inserted into a decoding/descrambling 
member referred to as decoder, in which method the smart 
card is used for storing, inter alia, data relating to the 
entitlements of the user, said entitlements being biaded over 
the air into each user smart card from a central management 
device which generates and transmits entitlement manage- 
ment messages. 

The entitlements arc understood to mean an assembly of 
data entitling a user to receive a given program. 

The invention also relates to a television system compris- 
ing a transmitter and a plurality of receiver installati(His» one 
of which is conceived for receiving pay-TV broadcasts, and 
having at least a dccoding/descranobling membo- referred to 
as decoder, provided widi a reader for a microprocessca- card 
referred to as smart card used ios stcHing data relating to the 
entitlements of a user, the transmitter comprising a manage- 
ment device which generates and transmits entitlement 
management messages over the air. 

The invention also relates to a television receiving ^a- 
ratus provided with a reader for a microprocessor card 
rcfctred to as smart card, in which the smart card is used tot 
storing, inter alia, entitlement management messages trans- 
mitted by a transmitter and protected by a cryptogr^hic 
means* which messages can only be exploited in association 
with the smart card for which they are intended and which 
contain, inter alia« an identification number of the receiving 
apparatus and data relating to the entitlements, the receiving 
apparatus being provided with means fcr starting a crypto- 
gr^)hic process in association wilh the smart card when it 
receives such a message for authenticating and decrypting 
the entitlement maoagemciit message and loading it into die 
smart card. 

An entitlement control method corresponding to the 
method described in the opening paragr^h is particularly 
known from the EUROCRYFT system. The standard con- 
cerning this system (specification of the D2-MAC packet 
system, edition 198S)> pp. 142, 143 describes such an 
encryption process. 

There will be a need for distributing several decoders with 
their associated smart cards to one and the same user. A 
second or a third decoder for one and the same user may be 
advantageous with regard to ^e costs of subscription f<H' the 
second and possibly the ttiird decoder for which he may 
obtain reductions. 

It is clear that such a reduction can only be granted if ttie 
second and the third decoder are used in the same house or 
the same ^artment In principle, this decoder must not be 
given to parents or friends. 

SUMMARY OF THE INVENTION 

It is an object of (he invention to provide a method and a 
system which renders ttie use of a slave decoder difQcult if 
it is not used in the proximity of a master decoder. 
In accordance with the inventive method: 
a master decoder and at least one slave decoder are 
arranged at the receiver end, to be used in one and the same 
dwelling. 

the central management device supplies an entitlement 
management message which is intended for the master 
decoder and can be cjcploited only by the master decoder. 
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this entitlement management message, which is protected 
by a cryptographic means, contains, inter alia, an identifi- 
cation number of the master decoder and data relating to the 
entitlements and comprising those of a slave decoder. 

5 die master decoder starts a cryptogrfi?>hic process in 
association with the smart card when it receives this mes- 
sage for authenticating and decrypting the entitlement man- 
agement message, 
and the user dien inserts a slave smart card into the master 

to decoda and the master decoder writes the slave entitlements 
on said card. 

The invention is thus based on the recognition that die 
master decoder is used as a letterbox for entitlement man- 
agement messages intended for the slave smart card-slave 
decoder assemblies. 

The entitlements intended for the slave decoder are pref- 
erably renewed more frequently than the entitlements 
intended for the master decoder, for example, those intended 
for the slave decoder may be renewed at least every week, 
whereas the entitlements intended for the master decoder are 
renewed every mondi. 

Advantageously, a single entitlement management mes- 
sage intended for the master decoder may be used to update 
23 the entitlements of several slave decoders. 

The management device thus supplies only one entitle- 
ment management message for several receivers, for which 
a small storage capacity (approximately 100 $-bit bytes) in 
the decoders is sufficient 
30 A pay-TV system according to the invention is charac- 
terized in that 

it oon^ses, in one and the same dwelling, a master 
decoder and at least one slave decoder intended for use in 
this same dwelling, 

the management device is provided with means fcr sup- 
plying an entitlement management message intended for the 
master decoder and protected by a cryptogra^^c means, 
which message can be ei^Ioited only by the master decoder 
and which contains, inter alia« an identification number of 

^ the master decoder and data relating to the entitlements 
comprising those of a slave decoder, 

the master decoder is provided with noeans for starting a 
cryptographic process in association with the master smart 
card when it receives this message for authen t icating and 
decrypting foe entitlement management message and load- 
ing it into die master smart card, and means for writing the 
slave entitiements on a slave card \K4ien such a card is 
insexted into the master decoder. 

^ A television receiving apparatus according to the Inven- 
tion is advantageously i^vided with means for writing the 
entitlements of another apparatus, said to tie a slave appa- 
ratus into a slave smart card, when the entitlement manage- 
ment message contains endUements of a slave a|q>aratus 

j2 associated widi a slave smart card. 

BRIEF DESCRIPnON OF THE DRAWINGS 

These and other aspects of the invention will be ^parent 
from and elucidated with reference to the embodiments 
^ described hereinafter. 
In the drawings: 

FIG. 1 shows diagrammatically a system according to the 
invention, 

FIG. 2 shows the contents of an entidement management 
65 message, 

FIG. 3 shows diagrammatically a receiver installation 
with a master decoder. 
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DESGRIFTION OF THE PREFERRED whidi are thus valid for one week only. TTie messages 

EMBODIMENTS supplied by the managemeat device can only be exploited by 

^ . , the master decoder: the slave entitlements are never trans- 

The system shown in FIG. 1 coinpnses a transmission mitted directly from the mianagement device to the slave 
centre or transmitter 20 and a quantity of receiver ^ decoder and smart card assembly and the address and data 

installations, one of which is shown at 21. of aulhentification which they convey correspond to the 

The transmission centre 20 conqirises a picture and sound master decoder. These messages EMM are stored in a local 

source 10, for example a television camera or a video memory of the decoder 1. 

recorder whose signal is coded fc^ exan^^le in PAL, There is no hardware difference between a master decoder 
SEC AM, NTSC, etc., or also in a compressed digital form iq or a master smart card and between a slave decoder or a 

in an encoder 11 and then scrambled in a scrambling unit 12 slave smart card. 

which also adds the scrambling data and the necessary contents of the message EMM intended for the 

cryptographic elements to the signal, supplying descram- master decoder, shown in FIG. 2, contain several fields: the 

bllng keys to the receivers in known manner. These scram- address **AM^ of the master decoder, a service reference 

bling data, which comfMise, inter alia, the cntidements, are "Service reP, a field of data for the master and slave 

generated by a central cntittcmcnt management device 13. entitlements **M/EMM'', '^LiyEMM" ''SLn/EMM**, 

The signal is finally RF modulated by a modulator 14 etc. and a cryptographic protection data "crypto-protection**. 

before it is transmitted by an antenna 9 which may also be The field of entitlements may as well be transmitted in clear 

a satellite antenna. text or be encrypted. 

In a receiver installation 21, die signals are received by a When it receives this message, the master decoder starts 

receiver, here an antenna 7. whidi may also be a satellite a known cryptographic process in association widi the smart 

receiver system or a collective antenna or a cable network. card for authenticating and receiving the messages EMM, 

A distributor 8 distributes the signal among three and their decrypting if necessary, 

installations, for example arranged in three different rooms Here, the user has three decoder-smart card assemblies in 
of one and the same dwelling and constituted by a television ^ his house. Thus, thwe are three decoders 1, 2, 3 and three 

receiver 4 and a decoder 1 with a smart card 31, a television ^roart cards 31, 32, 33. 

receiver 5 and a decoder 2 with a smart card 32, and a The card 31 attached to tiie decoder 1 is registered in the 

television receiver 6 and a decoder 3 with a smart card 33, management device as the master card. The cards 32, 33 

respectively. Each decoder is connected to the cocrespond- attached to the decoders 2, 3, respectively, are registered in 
ing television receiver, for examf^e by means of a standard ^ the management device as slave cards, 

peripheral television connectioD allowing transfer of the One can have only one master message EMM for updat- 

useful signals between the television receiver and the ing the entitlements of the two slave decoders. One nuy also 

decoder. One of the decoders, for exan^le decoder number have several messages, provided ttiat each can be exdu- 

1 is the master decoder and the two others are slave sively exploited by the master decoder which will retransmit 

decoders. these messages. 

Known, improved cryptographic and addressing mecha- The system may also be simplified when all the slave 

nisms are used to ensure the correct transmission and cards for one and the same user are dones, with the same 

reception of entitiemcnts. A standard procedure, for exsaaplc address, the same keys, etc. However, the slave cards may 
*'EUROCRYFr* may be used. The entitlements axe trans- ^ also be provided with different keys and addresses, 

ferrcd in entidement management messages which are Once a week the user is obliged to enter the cards 32 and 

referred to as EMM. The data contained in the entitlements 33 physically into die master decoder 1 so as to update the 

are, inter alia, references relating to subscr^tions, dates of entitlements of the slave cards. 

validity, credit values, etc. The periods of validity mentioned above are of course 

The users having more than one decoder and smart card purely indicative and any other period may be chosen, 

assembly are registered in the management device 13. The The reception of the entitlements and decoding of the 

master decoder and smart card assembly and the slave picture and sound signals are realised at the user's home by 

decoder and smart card assembly are thus identified in the means of a decoder; A master decoder 1 is shown in greater 

management device: this device keeps track of all the detail in FIG. 3. It is provided with means 16 for receiving 
decoder and smart card assemblies distributed among the ^ broadcasts, a deooding/descxambllng module 17 and a 

users. When a first decoder and smart card assembly is reader 18 for the smart card 31. 

suppUcd to a user, the smart card distribution key is regis- The known means 16 for receiving broadcasts (tuner, 

tered as the master key. When a second and subsequently a ftcquency conversion, atxi4>Uficr, demodulator) deliver the 

third decoder and smart card assembly is suppUcd to the scrambled video and sound and dau packets to the 
same user, at the same house address, the second distrr*bution 55 deooding^descramWing module 17. The module 17 returns 

key and the diird distribution key arc registered as slave the descrambled signals which are applied to the television 

Jceys. receiver 4. 

The management device suppUes a message EMM, for The module 17 returns certain digital data in known 

exaii^>le once a month, for renewing the master entidcments manner to the device with the smart card 18-31, notably 
(a master entitlement is valid for one month). This message ^ control words extracted fi»m said data packets, and the card 

EMM is received over the air on the basis of the idcntifi- supplies in return an Initialization wwd which enables the 

cation nuinber of the decoder, i.& the address of the card 31, decoder to desaamble the video signals. Hie smart card 

and passed on to the card 31 by the decoder 1. comprises a crypiogr^Aic data referred to as distribution 

The management device transmits, for exanq)le once a key intended for the user only and which allows decryption 
week, a message EMM intended for the master decoder and 65 of the control words received in an encrypted form over the 

containing, inter alia, the data which are necessary for each air by means of the above-mentioned improved known 

card 32 and 33 to renew the entitlements of these cards addressing and cryptographic mechanisms. 
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The decoder reads, from the messages EMM for this 
decodex, the endtlement managemeDt messages for the slave 
decoders, ff they have been encrypted, it dcciypts them by 
means of the distribution key from the card 31. It stores them 
in a memory 19 in which they can be reread so as to enter 5 
them on a slave card which ttic user iDScrts into the reader 
18. 

We claim: 

1. A pay tv method, comprising the steps of: 
airanging a master decoder and at least one slave decoder 

to be used with a slave smart card, where both decoders 
are located at a user^s dwelling of a pay tv system, said 
master decoder for receiving an entitlement message 
from a central management device, said entitlement 
message containing data relating to the entitlements of 
a user which message can be c:;q>loited only by said 
master decoder and which message is protected by a 
cryptographic means and includes an identiftcatioA 
code of the master decoder and data relating to the 
entitlements of at least one of said slave decoden; ^ 
decrypting and authenticating said entitlement message at 

the master decoder; 
inserting the slave smart card into the master decoder, and 
writing the slave entitlements to the slave smart card. 25 

2. A method as claimed in claim 1, wherein the entitle- 
ments intended for the at least one slave decoder are 
renewed more frequently than entitlements intended for the 
master decoder. 

3. A method as claimed in claim 2. whmin the entitle- 30 
ments intended for the slave decoder are renewed at least 
once a week. 

4. A method as claimed in claim 1, wherein there is an 
entitlement management message which is intended for the 
master decoder to update the entitlements of several slave 35 
decoders. 

5. A pay tv system con^slsing: 

a master decoder to be used with a master smart card and 
at least one slave decoder to be used with a slave smart 
card, where both decoders are located at a user's 40 
dwelling, the master decoder comprising a reader for 
reading smart cards which store data relating to the 
cntitiements of a user; 
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a transmitter comprising a management device which 
generates and transmits entitlement management 
messages, at least one entiUement management mes- 
sage being intended for the master decoder and being 
encrypted such that it can be exploited only by the 
master decoder and which includes an identification 
code of the master decoder and data relating to the 
entitlements of the slave decoder; and 

wherein the master decoder further includes means for 
decrypting, in association with the master smart card, 
the entitlement management message intended for it 
and means for loading at least a portion of the entitie- 
ment maa^ement message into the master smart card, 
and means for writing the slave entictements on the 
slave smart card when the slave smart card is inserted 
into the master decoder. 

6. A television receiving apparatus comprising: 

a reader for reading from a smart card entitlement mes- 
sages transmitted by a transmitter and protected by a 
cryptographic means; 

means for exploiting the message when the receiving 
apparatus is in association with the smart card for 
which the messages are intended; 

means for receiving from the entiUement message iden- 
tification code data and data relating to the entitle- 
ments; 

means for starting a cryptographic process in association 
with the smart card when the television receiving 
^^)aratus receives such a message for authenticating 
and decrypting; 

means for loading at least a portion of the message imo 
the smart card; 

means for reading from the message entitiemcnts for 
another ^aratus referred to as a slave af^»aratus and 
associated with another smart card referred to as a slave 
card; and 

means for writing &e entitiements of the slave apparatus 
into the slave card. 

» )(t * » Kt 
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